2026-09-30 归档

今日共收录 1598 条安全情报,包含 728 个 CVE,467 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-29 发布INFO

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec...

CVE-2026-95310

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-95299

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outsid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted H...

CVE-2026-95283

Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (...

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...

CVE-2026-95277

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitra...

CVE-2026-84436

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template sy...

CVE-2026-77177

Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Nam...

CVE-2023-54400

Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authent...

CVE-2026-82973

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 1...

CVE-2026-100819

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100818

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100811

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.

CVE-2026-100804

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100800

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100786

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Firef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100778

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR...

CVE-2026-100770

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR...

CVE-2026-100762

Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbit...

CVE-2026-8066

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmw...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions all

历史摘要 · 未重新核验 · NVD